Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "jpdewa", "we", "us", or "our" — the operator of the online betting platform accessible at https://jpdewa.cam and all associated sub-domains and applications.
• "Platform" — the website, mobile-optimised site, and any dedicated application through which jpdewa makes its services available.
• "Player", "you", or "your" — any individual who accesses, browses, registers on, or uses the Platform in any capacity.
• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, either directly or in combination with other data.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — jpdewa, the entity that determines the purposes and means of Processing Personal Data.
• "Third Party" — any natural or legal person other than the Player and jpdewa, including service providers, payment processors, and technology partners.
• "KYC" — Know Your Customer, the identity and age verification procedures required for account registration and withdrawal processing.
• "Cookie" — a small text file stored on a Player's device by the Platform for session management, analytics, or personalisation purposes.

This Privacy Policy applies to all Personal Data collected by jpdewa in connection with the operation of the Platform, including data obtained through the website, mobile site, live chat support, email correspondence, and any customer support interactions. It applies equally to registered Players and to unregistered visitors who browse the Platform without creating an Account.

The Platform is designed for users located in Indonesia and primarily serves Indonesian residents. By accessing or using jpdewa — regardless of your physical location — you acknowledge that your Personal Data will be Processed in accordance with this Policy. This Policy should be read together with our Terms & Conditions, which govern the overall relationship between jpdewa and its Players.

jpdewa collects the minimum Personal Data necessary to operate a safe, compliant, and high-quality betting platform. The categories of data we may hold about you are set out below:

3.1 Identity & Contact Data

• Full legal name (as it appears on your KTP or passport)
• Date of birth
• Indonesian National Identity Card number (NIK) or passport number
• Residential address in Indonesia
• Mobile telephone number
• Email address

3.2 Account & Financial Data

• Account username and encrypted password credentials
• Bank account details for linked Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, Bank Permata)
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Deposit and withdrawal transaction records in Indonesian Rupiah (IDR / Rp)
• Account balance history and betting activity logs

3.3 KYC Verification Documents

• Photographs or scans of government-issued identity documents
• Proof of address documents (utility bills, bank statements)
• Selfie or liveness verification images where required

3.4 Technical & Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session duration, pages visited, and features accessed
• Clickstream data and Platform interaction logs
• Cookie identifiers and similar tracking technology data

3.5 Communications Data

• Live chat transcripts and support ticket correspondence
• Email communications sent to or received from jpdewa
• Feedback, survey responses, and complaint records

We collect Personal Data through the following channels:

• Direct provision: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, or contacting our support team.
• Automated collection: Technical data gathered automatically as you interact with the Platform via Cookies, server logs, and similar technologies.
• Third-party sources: Identity verification data returned by our KYC service providers; transaction data supplied by payment processors; fraud-risk signals from specialist fraud-detection services.
• Public sources: Where permitted, publicly available information used to verify identity or detect prohibited conduct.

jpdewa processes your Personal Data for the following purposes:

jpdewa processes your Personal Data on one or more of the following legal grounds, depending on the specific purpose:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to when registering your Account — including operating your Account, processing transactions, and delivering betting services.
• Legal obligation: Processing necessary to comply with applicable law, including KYC identity verification, AML reporting obligations, and age verification requirements (21+).
• Legitimate interests: Processing carried out in pursuit of jpdewa's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time by contacting our support team, without affecting the lawfulness of prior Processing.

jpdewa does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We may share your data with the following categories of recipients strictly as necessary to operate the Platform:

7.1 Technology & Game Providers

Game studios and platform technology partners — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft — receive limited technical data (such as session identifiers and game outcome logs) required to deliver and audit their games on the Platform. These providers are bound by contractual data protection obligations.

7.2 Payment Processors

When you make a deposit or request a withdrawal, relevant financial data is shared with the applicable payment processor (your chosen Indonesian bank such as BCA, BRI, BNI, Mandiri, CIMB Niaga, or OCBC NISP; or your e-wallet provider such as OVO, DANA, GoPay, ShopeePay, or LinkAja) to complete the transaction. These entities process your data under their own privacy policies and applicable financial regulation.

7.3 Identity Verification & Fraud Services

We engage specialist KYC and fraud-detection service providers who process identity document data on our behalf. These providers are contractually required to process data only on jpdewa's instructions and to maintain appropriate security standards.

7.4 Legal & Regulatory Authorities

We may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of jpdewa, its Players, or the public.

jpdewa takes particular care in handling payment-related Personal Data given its sensitivity. The following principles govern how we treat your financial information:

• Full bank account numbers are masked in our internal systems after the initial verification step; only the last four digits are displayed in your Account dashboard.
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) are stored in encrypted form and used solely to process authorised transactions initiated by you.
• Transaction records are retained for a minimum of five years to comply with financial record-keeping requirements, after which they are securely deleted.
• jpdewa does not store full card numbers on its own servers. Any card-related data is handled exclusively by our PCI-DSS-compliant payment partners.
• All deposit and withdrawal requests are logged with timestamps (in WIB) and linked to your Account for audit and dispute-resolution purposes.

We retain your Personal Data only for as long as is necessary to fulfil the purposes described in this Policy or as required by applicable law. Our standard retention periods are as follows:

On expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregated analytics purposes.

jpdewa implements a layered approach to data security, combining technical controls, organisational policies, and staff training to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure. Our key security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Password Hashing: Account passwords are stored using a one-way cryptographic hashing algorithm. jpdewa staff cannot view your password in plain text.
• Access Controls: Personal Data is accessible only to jpdewa personnel who require it to perform their job functions. Access is logged and subject to regular audit.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their Accounts for an additional layer of login security.
• Penetration Testing: The Platform undergoes periodic security assessments by independent specialists to identify and remediate vulnerabilities.
• Incident Response: We maintain a data breach response plan. In the event of a breach that is likely to affect your rights, we will notify you and relevant authorities as required by applicable law.

While we apply rigorous security controls, no internet-based system can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for using a secure, private device when accessing the Platform.

jpdewa uses Cookies and similar technologies to operate the Platform effectively, remember your preferences, and gather anonymised analytics data that helps us improve the user experience. The categories of Cookies we use are:

11.1 Strictly Necessary Cookies

These Cookies are essential for the Platform to function. They maintain your login session, remember language and display preferences, and facilitate secure transactions. These Cookies cannot be disabled without significantly impairing your ability to use the Platform.

11.2 Analytics Cookies

We use analytics tools to collect aggregated, anonymised data on how Players navigate the Platform — including pages visited, time spent on each section, and features used. This information helps us identify areas for improvement and optimise the overall experience. Analytics data is not linked to your personal identity.

11.3 Functionality Cookies

Functionality Cookies remember choices you make — such as your preferred game category or display currency format — to provide a more personalised experience during your current and future sessions.

11.4 Managing Cookies

You can manage or delete Cookies through your browser settings at any time. Please note that disabling Cookies may affect the availability of certain Platform features, including session persistence and game loading. Refer to your browser's help documentation for guidance on Cookie management.

Subject to applicable law and certain exemptions, you have the following rights in relation to your Personal Data held by jpdewa:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is being used.
• Right to Rectification: You may ask us to correct any inaccurate or incomplete Personal Data. You can update basic Account details directly through your Account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we temporarily suspend our use of your Personal Data in certain circumstances — for example, while accuracy is contested.
• Right to Data Portability: Where Processing is based on consent or contractual necessity, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to Processing carried out on the basis of our legitimate interests, or to direct marketing at any time. We will cease that specific Processing unless we can demonstrate compelling grounds that override your objection.
• Right to Withdraw Consent: Where Processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior Processing.

To exercise any of these rights, please contact our support team at [email protected]. We will respond to verifiable requests within 30 calendar days. We may need to verify your identity before fulfilling a request to ensure the security of your data.

The jpdewa Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under 21 years of age. Age verification is conducted as part of our mandatory KYC process for all registered Players.

If we discover or are notified that Personal Data has been collected from a person under the age of 21 — whether through deliberate misrepresentation or any other means — we will immediately suspend the Account concerned, void any transactions, and permanently delete all associated Personal Data to the extent permitted by law. Any balances held in an underage Account will be forfeited in accordance with our Terms & Conditions.

Parents or guardians who believe that a minor may have registered on the Platform should contact us immediately at [email protected] so that the Account can be investigated and closed without delay.

As an internationally operated platform, jpdewa may transfer your Personal Data to servers or service providers located outside of Indonesia. Such transfers occur primarily in the following contexts:

• Game studio technology servers operated by providers such as Pragmatic Play, Evolution Gaming, and Microgaming, which may be located in Malta, Gibraltar, or other jurisdictions.
• Cloud infrastructure and hosting services used to deliver the Platform to Indonesian users with low latency.
• KYC and fraud-detection service providers who operate verification infrastructure across multiple countries.

Where Personal Data is transferred internationally, jpdewa ensures that adequate safeguards are in place — including data processing agreements with appropriate contractual clauses — to ensure your data receives a level of protection consistent with the standards described in this Policy. By using the Platform, you acknowledge and consent to such transfers where they are necessary to deliver the services you have requested.

jpdewa reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. When material changes are made, we will update the "Last Revised" date at the top of this page and, where practicable, notify registered Players via email or an in-Platform notification.

Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically to remain informed of how jpdewa protects your Personal Data. If you have any concerns about a planned or recent change to this Policy, please contact our support team before continuing to use the Platform.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how jpdewa handles your Personal Data, please reach out to our Data Privacy team through the following channel:

• Email: [email protected]
• Live Chat: Available in-Platform (09:00–23:00 WIB), with Indonesian-speaking agents during peak hours
• Response Time: Privacy-related requests acknowledged within 2 business days; resolved within 30 calendar days

We take all privacy concerns seriously and will investigate every complaint thoroughly. Where a complaint cannot be resolved to your satisfaction, you may have the right to escalate the matter to the relevant data protection authority in the jurisdiction applicable to your situation.